Next-Generation Cybersecurity for Enhanced Fire Safety

Let’s Have a Close Look at Edwards EST4 System  

Commercial fire alarm systems are increasingly becoming a prime concern from a cybersecurity perspective.  

The Edwards EST4 Control Panel is leading that charge, combining the most robust fire safety with state-of-the-art cybersecurity features. This blog explains the thorough cybersecurity capabilities of the EST4 system, according to Edwards’ newly released white paper, and identifies why BEC is your best choice for implementing this progressive solution in your facilities.  

The Need for Cybersecurity in Fire Alarm Systems  

Merriam-Webster defines cybersecurity as “measures taken to protect a computer or computer system (on the internet) against unauthorized access or attack.” Because fire alarm systems aren’t connected, it was once believed that they are safe from these kinds of attacks. This thinking is no longer possible or practical in this age of connectivity. Modern fire alarm systems, such as the EST4, require external connections to perform some of their integral operations, like event-based e-mail notifications, which demand a strong measure of cybersecurity.   

EST4: The Fully Integrated Solution for Cybersecurity  

The EST4 system has numerous layers in place for cybersecurity within the fire alarm network to ensure safety and integrity. Some of the important features are:  

1. Air Gaps and Physical Security: Although in most cases, an air gap may provide an appropriate compensating control, this is often not a practical consideration. The EST4 system will implement physical security measures that include tamper switches and monitored access to establish another layer of protection.  

2. Internal Network Security: EST4 works on a self-configuring peer-to-peer IPv6 network; each node authenticates to every other node through a salted hash of a unique identifier. This reduces the risks associated with “man-in-the-middle” attacks and ascertains safety in communication over the network.  

3. Programming and Hardware Protections: To minimize the attack surface, all the programming ports on microcontrollers are disabled during manufacturing, and physical connection points are removed. Further, all services and applications run non-root-based, and no console access is given.  

4. Proxy Firewall: The EST4 has an integral, fully fire-listed firewall that separates the life safety network from the external networks. This internal proxy, handling all network traffic, transforms and repackages data in such a way that no direct data packets pass through, significantly enhancing security.  

5. Access and Authentication: The EST4 system is designed with open industry best-practice standards and includes access control based on job functions, seven-digit access codes, and logging of all access attempts. Two-factor authentication and timeout of sessions enhance the security of the system.  

An Overview of Cybersecurity   

• Email/SMS, ECPxml, and Web Browser Services: Secured via 256-bit AES encryption (FIPS-197). 

• Central Station Connections: Utilizes 128-bit AES Tyco Protocol; encryption and authentication keys are provided on an account basis.  

• Outgoing Communication Services: The EST4 initiates services for enhanced security.    

• Browser and ECPxml Communications: Authentication via a passphrase is required in a TLS session.    

• Brute Force Protection: Web browser access shuts down after five unsuccessful attempts, all access attempts are logged for audit.   

Partner with BEC for Advanced Fire Safety Solutions 

At Building Electronic Controls, Inc., we believe in bringing cutting-edge fire safety solutions to each of our valued clients. The Edwards EST4 system is the best example of the confluence in fire safety and cyber security. With service areas in Los Angeles, Bakersfield, Fresno, Sacramento, Orange County, Northern California, and Southern California, BEC is your go-to partner to ensure safety and security in buildings.  

Questions? Ready to learn more about how the EST4 system can benefit your facility? Contact BEC today and let our professionals help you find the perfect solution for your fire safety and cybersecurity needs.